Cisco Systems 4.2 Network Card User Manual


 
4-15
Installing and Configuring Cisco Access Registrar, 4.2
OL-17221-02
Chapter 4 Configuring Cisco Access Registrar 4.2
Configuring SNMP
/opt/CSCOar/bin/arserver stop
Modifying the snmpd.conf File
The path to the snmpd.conf file is /cisco-ar/ucd-snmp/share/snmp. Use vi (or another text editor) to
edit the snmpd.conf file.
There are three parts of this file to modify:
Access Control
Trap Recipient
System Contact Information
Access Control
Access control defines who can query the system. By default, the agent responds to the public
community for read-only access, if run without any configuration file in place.
The following example from the default snmpd.conf file shows how to configure the agent so that you
can change the community names, and give yourself write access as well.
Complete the following steps to modify the snmpd.conf file.
Step 1 Look for the following lines in the snmpd.conf file for the location in the file to make modifications:
###############################################################################
# Access Control
###############################################################################
Step 2 First map the community name (COMMUNITY) into a security name that is relevant to your site,
depending on where the request is coming from:
# sec.name source community
com2sec local localhost private
com2sec mynetwork 10.1.9.0/24 public
The names are tokens that you define arbitrarily.
Step 3 Map the security names into group names:
# sec.model sec.name
group MyRWGroupv1local
group MyRWGroupv2clocal
group MyRWGroupusmlocal
group MyROGroupv1 mynetwork
group MyROGroupv2c mynetwork
group MyROGroupusmmynetwork
Step 4 Create a view to enable the groups to have rights:
# incl/excl subtree mask
view all included .1 80
Step 5 Finally, you grant the two groups access to the one view with different write permissions:
# context sec.model sec.level match read write notif
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none